# Create a Master Encryption Key and Store in Google HSM

### Prerequisites

Follow the steps in this document to create a vault in Google Cloud Platform (GCP).

### Setting up Master Encryption Key with Google

> Watch video tutorial [here](#video-tutorial)

#### There are two ways to create a master key for FenixPyre encryption with GCP:

* Create a master key in the FenixPyre Dashboard
* Import the master key

**Creating and Managing a Master Key in FenixPyre Using Google Cloud**

1. **Log in to the FenixPyre Dashboard:**
   * Access the FenixPyre Dashboard with your credentials.
2. **Navigate to Key Management:**
   * Go to `Settings` → `Security` → `Key Management`.
3. **Create a Master Encryption Key:**
   * Click on `Master Encryption Keys`.
   * Click on `Add new master encryption key`.\ <br>

     <figure><img src="/files/hh1oKAgYREHVEiaItdPG" alt=""><figcaption></figcaption></figure>
4. **Select Google Cloud from the options:**<br>

   <figure><img src="/files/VAPPFUkjAIf9Eiis1Cda" alt=""><figcaption></figcaption></figure>
5. **Enter Key Details and Create the Key:**
   * Provide a name for your key.
   * Click `Create Key` to proceed.<br>

     <figure><img src="/files/iB6WkPDTOX3fG2vyTfgp" alt=""><figcaption></figcaption></figure>
6. **Success Confirmation:**
   * A confirmation message will appear indicating successful key creation.\
     ![](/files/bBcTNne0REMuQBRiFRcK)
7. **Copy and Download the Master Key:**

   * Copy the master key and download it for safekeeping.
   * Enter the key on the next page for verification.

   **Important:** FenixPyre does not store the decrypted version of the master key. Please ensure you securely store the key, as it is essential for decrypting your data in the future.
8. **Key Verification:**
   * Enter the key in the final step for verification to complete the master key creation process.\ <br>

     <figure><img src="/files/gvXBGusyF7bBh45NZ6aA" alt=""><figcaption></figcaption></figure>

***

## Video Tutorial

{% embed url="<https://www.loom.com/embed/ef6ba67407f947f2aa38294d23801189?sid=75c99dad-1bd0-4aec-8c59-2c6345d41847>" %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.fenixpyre.com/fenixpyre-for-admins/admin-dashboard/key-management/master-encryption-keys/setup-bring-your-own-master-encryption-key-byomek-with-google-hsm/create-a-master-encryption-key-and-store-in-google-hsm.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.